Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95c9fc34-a97d-3d63-96fa-d5feb4960a0a.roa
File:                     95c9fc34-a97d-3d63-96fa-d5feb4960a0a.roa (raw, json)
Hash identifier:          i1ni2lMQNZTBf0cYPNkcbPtNRhw0bh9pBeqcc9maeR0=
Subject key identifier:   26:F1:A3:6C:DB:36:F6:5A:D9:3E:90:46:B0:9F:F9:AA:54:3C:71:79
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F63691070B757C5CD15180
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95c9fc34-a97d-3d63-96fa-d5feb4960a0a.roa
Signing time:             Fri 12 Apr 2024 17:24:40 +0000
ROA not before:           Fri 12 Apr 2024 17:24:40 +0000
ROA not after:            Thu 11 Jul 2024 17:24:40 +0000
asID:                     11351
IP address blocks:        142.111.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:36:91:07:0b:75:7c:5c:d1:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:40 2024 GMT
            Not After : Jul 11 17:24:40 2024 GMT
        Subject: CN=28a575cd-76ab-4ac5-a679-cdd0a4a165f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ab:6d:3c:35:51:6e:77:b8:5d:8b:88:36:0e:
                    14:bc:3f:cc:68:5a:65:a2:a1:a1:61:c3:af:2f:6b:
                    da:df:32:9e:e4:c8:5e:f2:f7:74:64:de:e9:de:8e:
                    dc:7a:91:59:59:b4:88:f1:2c:5e:46:66:31:09:87:
                    d9:6f:6b:50:77:71:69:db:3f:6c:ff:8b:fb:6c:c1:
                    5b:10:83:c9:94:82:a6:94:6f:02:c2:76:1f:6d:d4:
                    38:a2:3f:f4:ae:e2:cc:9f:49:ab:21:a9:fe:af:bb:
                    6c:2a:a2:23:69:c0:1c:db:a4:8e:cc:70:47:e9:55:
                    af:ab:e8:21:a7:f6:34:a2:97:b1:56:36:a4:0f:1d:
                    8a:89:4c:a0:93:c9:57:2d:bb:76:0e:95:25:04:7e:
                    bf:c6:10:06:c2:72:90:ba:13:6d:e8:8e:5a:05:87:
                    cd:74:bd:8e:63:72:81:74:a9:38:49:84:74:7c:2a:
                    96:69:f5:00:35:2a:3d:ac:d0:a2:48:16:a0:44:c2:
                    d8:66:c6:da:ad:8c:a8:30:0b:f2:41:ee:11:df:a1:
                    a7:dd:8c:b8:7f:1c:84:82:ff:e4:18:bf:ee:e5:6e:
                    bd:11:89:ba:19:12:31:6b:51:b8:f3:b6:51:32:b0:
                    ac:cf:4a:22:73:cb:b2:1c:44:51:eb:d2:a6:26:9a:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F1:A3:6C:DB:36:F6:5A:D9:3E:90:46:B0:9F:F9:AA:54:3C:71:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95c9fc34-a97d-3d63-96fa-d5feb4960a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:1a:59:d2:bf:18:08:c7:88:6d:69:bb:35:83:0b:1f:e2:42:
         77:1c:0c:41:e3:1a:3b:b7:b2:ee:e3:f1:f2:f8:76:c4:13:a5:
         dd:4d:31:b0:67:96:6a:e7:42:0b:69:34:3b:94:78:13:42:da:
         17:6a:39:90:c7:07:43:3c:61:2d:db:22:b8:d9:0d:c5:86:32:
         9a:9d:9c:80:79:c2:6e:ae:95:35:ef:a9:00:d7:37:8d:04:ff:
         f6:36:63:68:97:77:15:06:30:12:51:76:c3:01:99:77:37:54:
         92:27:3a:ce:06:df:4d:d9:a2:23:b3:ab:84:a0:88:50:58:04:
         be:61:f1:54:c1:cf:54:69:8a:6f:79:b7:4e:c4:91:68:59:d7:
         37:9c:c6:0d:e9:7f:54:59:87:ac:38:75:df:38:82:53:38:4e:
         dd:d1:6d:34:69:ec:a8:b1:89:e9:bc:43:e8:58:83:df:cf:16:
         96:d8:6d:2f:60:33:b8:25:1a:d5:89:3a:3d:e5:fc:80:c2:0c:
         24:e5:1c:03:2d:17:16:ea:8e:8a:cd:98:75:20:41:ef:1b:11:
         32:bc:06:7f:8a:71:ea:40:e4:d7:5e:49:f0:35:79:75:a4:e0:
         0a:cd:53:e9:8d:b9:1d:d3:42:c5:0b:d5:65:c2:be:e9:39:5e:
         1a:43:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 19:40:14 2024 by rpki-client on console-fra.rpki-client.org